Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/x7ZDHO4Yn4tL6_XH_dzKIRV4wYQ.roa
File: x7ZDHO4Yn4tL6_XH_dzKIRV4wYQ.roa (raw, json)
Hash identifier: L1r8gKAUWbPi2zcUhAJaGkLuAOxpoj7xW+mWxJthugU=
Subject key identifier: C7:B6:43:1C:EE:18:9F:8B:4B:EB:F5:C7:FD:DC:CA:21:15:78:C1:84
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0925
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/x7ZDHO4Yn4tL6_XH_dzKIRV4wYQ.roa
Signing time: Tue 26 Mar 2024 04:06:27 +0000
ROA not before: Tue 26 Mar 2024 04:06:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 119.59.192.0/22 maxlen: 24
119.59.204.0/22 maxlen: 24
119.59.216.0/22 maxlen: 24
119.59.228.0/22 maxlen: 24
119.59.240.0/22 maxlen: 24
123.98.24.0/22 maxlen: 24
123.98.36.0/22 maxlen: 24
123.98.52.0/22 maxlen: 24
123.98.92.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 10:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341 (0x925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 26 04:06:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C7B6431CEE189F8B4BEBF5C7FDDCCA211578C184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:af:3a:0b:c6:f4:6b:72:4d:0f:75:61:ae:
62:8f:53:be:e6:ff:9e:bd:8c:0c:f1:0b:de:b6:77:
60:98:43:d5:85:47:01:6a:b3:c8:7b:d3:fb:6e:b1:
86:e2:ad:41:cc:1b:89:58:01:c4:58:f6:35:fb:3d:
43:65:aa:18:62:95:ca:6d:39:88:ce:57:9f:a4:33:
32:6d:2d:4f:ce:3c:f4:34:eb:23:04:25:f9:8c:9a:
14:83:c9:96:b0:3f:44:24:51:e6:bb:1b:95:ac:f9:
04:ad:6b:37:47:ad:d9:28:a4:34:02:55:91:79:da:
57:c6:bc:c3:57:18:b7:20:df:6d:8f:d5:a7:dc:8e:
c6:6e:71:b8:fe:60:16:3c:af:c4:1b:4a:40:7f:e5:
a7:7c:37:30:70:4b:5f:c6:f9:65:31:aa:64:1a:84:
c6:4f:9a:1b:dc:f9:0c:2c:b2:e3:ea:56:1c:28:e2:
64:5b:c3:8d:87:db:e2:18:1c:a6:1d:5a:77:7e:4c:
b8:3b:d5:15:53:df:c4:7d:9c:4b:27:e7:48:e1:b5:
f8:04:0b:a8:1e:48:50:8e:67:49:1a:17:d7:e4:98:
86:cd:24:fb:ca:4f:2d:78:a9:80:1f:b3:97:30:e7:
2d:00:f1:f7:24:1b:77:69:ec:5c:5b:be:d1:3d:d3:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:43:1C:EE:18:9F:8B:4B:EB:F5:C7:FD:DC:CA:21:15:78:C1:84
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/x7ZDHO4Yn4tL6_XH_dzKIRV4wYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.192.0/22
119.59.204.0/22
119.59.216.0/22
119.59.228.0/22
119.59.240.0/22
123.98.24.0/22
123.98.36.0/22
123.98.52.0/22
123.98.92.0/22
211.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:e5:94:fe:2e:c2:ad:48:86:8d:98:67:7a:21:c6:d3:d9:01:
29:94:1c:24:02:ed:77:8a:d5:02:61:90:f8:88:47:c3:11:19:
64:36:cd:b3:8d:a2:b7:d8:6e:e0:45:83:6f:ae:c2:ee:f7:b7:
e6:af:c2:71:23:a2:31:de:df:ce:b9:6b:1f:b6:f2:bf:2a:02:
4d:00:65:73:65:f8:85:9e:32:a4:de:a4:2f:e9:78:b8:5c:46:
26:ec:41:72:d3:89:59:b9:fa:eb:05:d8:58:c1:18:d7:86:bd:
63:46:4a:40:b3:32:1a:99:f6:fa:43:f9:39:17:eb:8b:f9:1c:
65:41:7e:39:08:a4:63:7f:ad:9e:77:24:24:0d:0d:28:41:25:
a2:d1:06:b7:a5:e9:c3:73:54:63:4a:31:f0:48:a3:37:08:56:
e5:bd:15:41:9a:05:54:2b:47:b4:bf:7b:28:5e:88:c1:69:a0:
6e:c3:c8:84:a4:ef:90:a7:99:51:6c:32:2c:b3:f4:51:78:af:
52:88:e9:ce:e0:c4:19:63:89:e2:1f:50:61:8c:f7:4e:85:fa:
0b:ec:5e:ea:c5:f2:c1:e7:67:39:8e:97:3f:db:f6:33:5d:9e:
91:e2:20:c3:69:ae:74:c4:20:cd:ea:b9:35:29:64:d7:43:0b:
a9:b5:f0:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 21 14:01:37 2024 by rpki-client on console-fra.rpki-client.org